Enter the appropriate network information, then click OK. To create the objects, select Manage > Network Objects, then select New > Network. This policy is then installed using the Checkpoint TM NG Policy Editor to complete the Checkpoint TM NG side of the VPN configuration.Ĭreate Cisco network subnet and Checkpoint TM NG network subnet as network objects. Network objects and rules are defined to make up the policy that pertains to the VPN configuration to be set up. The Checkpoint TM NG is an object-oriented configuration. ip nat inside source route-map nonat interface Ethernet0/0 overload crypto isakmp key aptrules address 209.165.202.129Ĭrypto ipsec transform-set aptset esp-3des esp-md5-hmac !- Internet Key Exchange (IKE) configuration. Configure the Cisco 1751 VPN Router Cisco VPN 1751 Router Network Diagramįor more information on document conventions, refer to Cisco Technical Tips Conventions. If your network is live, make sure that you understand the potential impact of any command. All of the devices used in this document started with a cleared (default) configuration. The information in this document was created from the devices in a specific lab environment. The information in this document is based on these software and hardware versions:Ĭisco IOS® Software (C1700-K9O3SY7-M), Version 12.2(8)T4, RELEASE SOFTWARE (fc1) Traffic from inside the router and inside the Checkpoint TM NG to the Internet flows. The Checkpoint TM NG basic policy is set up.Īll access, Network Address Translation (NAT), and routing setups are configured. The procedures outlined in this document are based on these assumptions. The 192.168.10.x private network inside the Checkpoint TM Next Generation (NG). The 172.16.15.x private network inside the router. This document demonstrates how to form an IPSec tunnel with pre-shared keys to join two private networks:

Checkpoint route based vpn